Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/9N9ui8-iyBY1Zd-ZjWCv8j7HyK4.roa
File: 9N9ui8-iyBY1Zd-ZjWCv8j7HyK4.roa (raw, json)
Hash identifier: 1viD40+SLD9d5zxC2noS71ju71cZCTrL8+anjq+B3jI=
Subject key identifier: F4:DF:6E:8B:CF:A2:C8:16:35:65:DF:99:8D:60:AF:F2:3E:C7:C8:AE
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 018CC86F29AB8654BF135BBD1DCDACD9180C
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/9N9ui8-iyBY1Zd-ZjWCv8j7HyK4.roa
Signing time: Tue 02 Jan 2024 04:29:37 +0000
ROA not before: Tue 02 Jan 2024 04:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 88.204.44.0/23 maxlen: 24
88.204.42.0/23 maxlen: 24
88.204.46.0/23 maxlen: 24
78.136.252.0/23 maxlen: 24
78.136.248.0/23 maxlen: 24
78.136.250.0/23 maxlen: 24
78.136.254.0/24 maxlen: 24
78.136.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:29:ab:86:54:bf:13:5b:bd:1d:cd:ac:d9:18:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Jan 2 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4df6e8bcfa2c8163565df998d60aff23ec7c8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:2c:9b:9b:36:2e:de:b7:15:fb:4f:ca:81:
65:0f:48:07:fa:00:b6:aa:63:7e:12:fd:0c:33:12:
40:08:f6:f8:bc:c2:14:b9:65:a4:9e:32:b4:af:28:
6e:e0:6b:c6:e1:58:42:3e:77:ce:cb:93:4d:28:ff:
32:cc:5b:32:f7:e8:28:14:94:a7:c6:0c:6e:34:1d:
46:d4:70:2b:35:2f:76:16:27:31:24:2b:93:79:12:
16:79:83:7b:d8:05:cd:14:52:ac:42:99:1f:e4:46:
f2:68:be:e8:10:aa:be:d4:b1:94:52:0e:28:3b:4f:
d5:5a:62:59:8e:69:d9:2e:e4:14:08:a5:d5:87:16:
79:a4:df:0d:48:6c:33:62:88:be:f1:99:70:c6:ef:
9a:8e:0a:6c:ff:1d:70:51:3e:b6:b3:ce:3b:f7:d6:
eb:96:7a:b3:5b:31:ff:01:b6:04:94:d4:56:67:03:
14:94:a9:2c:62:a4:a3:3e:fb:77:54:b2:37:ef:82:
0a:2c:ed:41:49:2c:0a:30:ec:77:0f:04:9f:2c:ae:
cc:a4:82:56:c5:5d:3b:c5:7d:16:e8:0b:ff:71:8e:
17:08:5b:c1:09:6f:e3:dc:95:3e:12:f8:35:51:40:
7b:ad:69:58:ec:bf:97:fa:3d:fa:24:fe:e7:e1:f9:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DF:6E:8B:CF:A2:C8:16:35:65:DF:99:8D:60:AF:F2:3E:C7:C8:AE
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/9N9ui8-iyBY1Zd-ZjWCv8j7HyK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.248.0/21
88.204.42.0-88.204.47.255
Signature Algorithm: sha256WithRSAEncryption
17:5e:96:67:17:b0:52:e8:c1:aa:ef:d5:71:99:66:58:cc:b1:
9e:ed:cf:4b:0e:f4:80:47:4c:63:37:b0:f8:ee:4b:9b:a0:eb:
e2:6c:f3:78:2a:e7:a5:c5:01:a8:b5:a5:d8:5f:85:d1:73:f2:
5c:f5:0f:b5:1c:94:7c:c8:5f:39:45:69:4b:a0:33:c9:2a:75:
d5:89:35:d8:c9:aa:fc:0a:aa:e6:3e:93:70:1b:2d:25:07:17:
58:44:58:6c:e3:e9:89:3e:13:d7:39:66:ae:6d:85:0e:ca:e4:
5b:35:c9:ab:79:4a:c2:e8:69:41:3e:ba:10:8d:b9:4f:73:ac:
d5:5b:f6:07:db:dd:d8:b4:9a:2c:33:4d:8b:c9:70:b2:1d:d6:
0d:6c:83:51:83:f7:79:0a:45:d4:dc:34:65:6b:79:3a:ca:71:
7f:01:6b:df:31:74:66:5b:2d:ad:c6:09:64:2b:1b:c1:a5:99:
02:cd:ee:e3:b0:c1:ee:7f:29:3c:0e:8b:3a:2d:7d:ff:5a:62:
75:e6:e3:c8:ea:07:56:90:cb:7d:16:41:18:37:7e:85:d6:a0:
2f:50:f5:10:d7:62:b5:3b:c3:59:64:4e:3a:53:20:df:2f:04:
72:80:03:1d:73:e8:91:7e:13:24:d1:47:ba:ad:bc:89:4a:e6:
ba:26:06:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 30 11:05:41 2024 by rpki-client on console-fra.rpki-client.org